Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/bd1ee5e2-338c-4d20-807e-e50b75583db8/0/3130332e32342e35382e302f32342d3234203d3e203436303532.roa
File:                     3130332e32342e35382e302f32342d3234203d3e203436303532.roa (raw, json)
Hash identifier:          UA+YdwLCDED5UMDmCG4dNPuGHlL+yaAK93vKKhIdDPg=
Subject key identifier:   06:1D:FE:BF:E1:A2:A7:DB:26:C9:2F:D1:F3:19:A5:E8:E6:12:1E:24
Certificate issuer:       /CN=59406D6B894D2596F895003DEE4D8D96CC43B39F
Certificate serial:       4EA2E250782A045C814A36FECC8C1853A933487C
Authority key identifier: 59:40:6D:6B:89:4D:25:96:F8:95:00:3D:EE:4D:8D:96:CC:43:B3:9F
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/59406D6B894D2596F895003DEE4D8D96CC43B39F.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/bd1ee5e2-338c-4d20-807e-e50b75583db8/0/3130332e32342e35382e302f32342d3234203d3e203436303532.roa
Signing time:             Sun 03 May 2026 03:02:30 +0000
ROA not before:           Sun 03 May 2026 02:57:30 +0000
ROA not after:            Sun 02 May 2027 03:02:30 +0000
asID:                     46052
IP address blocks:        103.24.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/bd1ee5e2-338c-4d20-807e-e50b75583db8/0/59406D6B894D2596F895003DEE4D8D96CC43B39F.crl
                          rsync://rpki-rsync.idnic.net/repo/bd1ee5e2-338c-4d20-807e-e50b75583db8/0/59406D6B894D2596F895003DEE4D8D96CC43B39F.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/59406D6B894D2596F895003DEE4D8D96CC43B39F.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 05:52:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:a2:e2:50:78:2a:04:5c:81:4a:36:fe:cc:8c:18:53:a9:33:48:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59406D6B894D2596F895003DEE4D8D96CC43B39F
        Validity
            Not Before: May  3 02:57:30 2026 GMT
            Not After : May  2 03:02:30 2027 GMT
        Subject: CN=061DFEBFE1A2A7DB26C92FD1F319A5E8E6121E24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:31:3b:be:5b:30:a0:07:c1:ba:31:aa:47:61:
                    ca:4e:f7:b9:cf:8b:91:43:d5:9b:42:36:d1:1f:e4:
                    8f:8f:57:fb:cf:71:00:77:95:42:fe:30:9f:c6:e4:
                    02:5b:4e:48:3d:41:5c:eb:6d:97:d3:cf:2c:78:9d:
                    b0:29:db:8e:6d:7e:78:27:d9:61:24:d6:a5:f9:b8:
                    b7:49:8a:0f:3f:93:16:cb:b1:04:c4:73:19:54:26:
                    4f:c7:6a:ec:75:f1:fd:14:cc:9e:94:66:b5:00:d8:
                    52:33:44:cb:dd:38:d4:53:e3:b2:89:52:fd:48:b7:
                    75:19:c0:51:e1:9d:12:dd:a2:ab:77:f3:58:f0:cc:
                    e9:29:ed:5e:87:82:60:4c:3c:3e:dd:f2:6b:64:01:
                    bc:6c:20:39:56:ab:ce:47:0c:7a:13:59:47:11:41:
                    ea:7a:dc:fd:d6:eb:ac:0e:6f:2d:5a:25:2a:5c:f8:
                    3b:f4:c9:58:f2:78:70:dd:98:30:71:57:4a:04:32:
                    e8:21:df:5f:9f:c8:b0:1e:74:06:17:97:a3:c4:c7:
                    3c:9a:50:00:0b:80:a8:86:c8:69:79:bb:44:9a:89:
                    ae:18:c7:c2:fe:c5:13:7d:b2:1a:f1:fa:83:53:f4:
                    64:aa:92:42:e8:6b:ac:0d:a0:0c:9b:30:97:53:03:
                    0f:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:1D:FE:BF:E1:A2:A7:DB:26:C9:2F:D1:F3:19:A5:E8:E6:12:1E:24
            X509v3 Authority Key Identifier:
                keyid:59:40:6D:6B:89:4D:25:96:F8:95:00:3D:EE:4D:8D:96:CC:43:B3:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/bd1ee5e2-338c-4d20-807e-e50b75583db8/0/59406D6B894D2596F895003DEE4D8D96CC43B39F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/59406D6B894D2596F895003DEE4D8D96CC43B39F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bd1ee5e2-338c-4d20-807e-e50b75583db8/0/3130332e32342e35382e302f32342d3234203d3e203436303532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.24.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:bf:6c:72:18:b7:2b:fb:98:f5:73:b0:a7:ba:9f:f4:95:95:
         c8:62:ca:f2:ef:75:90:be:dc:4c:2d:bc:f9:21:24:42:97:4c:
         a6:04:94:ee:18:a4:2e:61:36:bb:50:e7:24:b3:53:98:4a:1d:
         e5:92:51:ed:98:c9:17:f7:92:19:a3:01:08:11:c3:1f:1d:a1:
         d4:a0:bc:45:af:24:43:15:d7:4f:c6:ad:df:79:e3:74:78:72:
         77:04:c8:51:37:53:68:07:0a:01:36:9d:de:af:eb:97:24:98:
         8b:c2:8a:aa:82:36:43:85:17:9c:d8:a4:30:a4:7e:f7:f2:2a:
         5e:1a:53:dc:ab:49:40:62:44:18:48:01:ac:2e:96:03:3e:30:
         df:9a:c7:da:15:62:64:2a:91:a9:ff:66:a8:74:12:2a:52:b1:
         c9:12:0f:9d:84:ed:4b:be:5b:24:bb:ff:02:e8:f6:d6:51:76:
         c3:49:8d:46:ec:d6:27:55:e5:53:54:54:8e:bc:cb:d7:32:6a:
         e1:06:ad:44:eb:28:cc:11:d0:bf:fc:f7:ca:54:e0:41:ce:25:
         73:96:80:f7:6c:52:aa:0f:db:0e:87:c3:f1:93:f6:a3:4b:59:
         b6:e2:83:13:71:76:41:8c:97:c8:30:82:c1:78:84:f5:dd:7d:
         ed:5c:c0:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:27:42 2026 by rpki-client